Release Notes: rc.blockit was added to the contrib directory. Two
new configuration options were added:
FirewallTemporaryTarget and
FirewallPermanentTarget. check_blockit_log.pl was
added in the contrib directory for permanent
blocking. Fixes were made for parsing of snort,
SSH, and syslog ranging over more than one line.

Release Notes: Another SSH bad login check for invalid users was
added. The minimum firewall time was changed from
60 to 1. A log entry is now added when the
intruder blocking time is less than the minimum
firewall time.

Release Notes: This release includes an all network interfaces option. It
autodetects host IP and gateway addresses, scans syslog for
iptables logs, ignores established connections using
connection tracking, ignores filters using regexp
filtering, adds cumulative timing support, and includes more
command line options.

Release Notes: IPFW and IPFILTER support were added. Snort SigID
whitelist support was added. More information was
added to email logging, including the triggering
alert line and the number of minutes the IP will
be blocked for. The triggering alert line was
added to the normal log. This release was tested
against Snort 2.1.3.